CVE-2026-48759: TypeBot: Cross-Workspace Theme Template IDOR (Modification and Deletion)
TypeBot is a chatbot builder tool. Versions 3.15.2 and below have an Insecure Direct Object Reference vulnerability through cross-workspace Theme Template modification and deletion. The handleSaveThemeTemplate and handleDeleteThemeTemplate handlers validate that the authenticated user is a non-guest member of the provided workspaceId, but then operate on themeTemplateId via Prisma queries that do NOT include workspaceId in the WHERE clause. This allows any authenticated user to modify or delete theme templates belonging to any other workspace and may expose Template IDs via shared typebots or network traffic. This issue has been fixed in version 3.16.0.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
TypeBotto a version that resolves this vulnerability.Fixed in 3.16.0
Event History
Frequently Asked Questions
What is the severity of CVE-2026-48759?
CVE-2026-48759 has a severity rating of high with a score of 7.1.
How do I fix CVE-2026-48759?
To fix CVE-2026-48759, upgrade to TypeBot version 3.16.0 or later.
What does CVE-2026-48759 involve?
CVE-2026-48759 involves an Insecure Direct Object Reference allowing unauthorized modification and deletion of theme templates.
What are the affected versions of TypeBot for CVE-2026-48759?
TypeBot versions 3.15.2 and below are affected by CVE-2026-48759.
What is the impact of CVE-2026-48759?
The impact of CVE-2026-48759 includes the potential for unauthorized users to modify or delete theme templates across workspaces.